Allow any auditor to view the audit log

code-asher · code-asher · commit 9d0eb177f330 · 2024-07-30T13:11:33.000-08:00
diff --git a/site/src/contexts/auth/permissions.tsx b/site/src/contexts/auth/permissions.tsx
@@ -2,7 +2,7 @@ export const checks = {
   viewAllUsers: "viewAllUsers",
   updateUsers: "updateUsers",
   createUser: "createUser",
-  viewAuditLog: "viewAuditLog",
+  viewAnyAuditLog: "viewAnyAuditLog",
   createAnyTemplate: "createAnyTemplate",
   updateAllTemplates: "updateAllTemplates",
   viewDeploymentValues: "viewDeploymentValues",
@@ -45,9 +45,10 @@ export const permissionsToCheck = {
     },
     action: "update",
   },
-  [checks.viewAuditLog]: {
+  [checks.viewAnyAuditLog]: {
     object: {
       resource_type: "audit_log",
+      any_org: true,
     },
     action: "read",
   },
diff --git a/site/src/modules/dashboard/Navbar/Navbar.tsx b/site/src/modules/dashboard/Navbar/Navbar.tsx
@@ -16,7 +16,7 @@ export const Navbar: FC = () => {
   const { user: me, permissions, signOut } = useAuthenticated();
   const featureVisibility = useFeatureVisibility();
   const canViewAuditLog =
-    featureVisibility["audit_log"] && Boolean(permissions.viewAuditLog);
+    featureVisibility.audit_log && Boolean(permissions.viewAnyAuditLog);
   const canViewDeployment = Boolean(permissions.viewDeploymentValues);
   const canViewOrganizations =
     featureVisibility.multiple_organizations &&
diff --git a/site/src/testHelpers/entities.ts b/site/src/testHelpers/entities.ts
@@ -2478,7 +2478,7 @@ export const MockPermissions: Permissions = {
   updateAllTemplates: true,
   viewAllUsers: true,
   updateUsers: true,
-  viewAuditLog: true,
+  viewAnyAuditLog: true,
   viewDeploymentValues: true,
   viewUpdateCheck: true,
   viewDeploymentStats: true,
